$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa File: E0CDA376596E11F0B19AF24BC4F9AE02.roa (raw, json) Hash identifier: Yc5RdLatSvuN/6oZ4bXQpO1X0GtJ7ECPoWHn98lkgO8= Subject key identifier: 03:6C:49:DE:24:8C:A0:05:D8:75:BD:07:3D:89:04:9C:6B:62:94:EF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: D6 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa Signing time: Sat 05 Jul 2025 07:08:40 +0000 ROA not before: Sat 05 Jul 2025 07:08:40 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 213802 IP address blocks: 43.255.52.0/24 maxlen: 24 43.255.53.0/24 maxlen: 24 43.255.54.0/24 maxlen: 24 43.255.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Jul 5 07:08:40 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6868cf78-450c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:0a:23:55:40:c3:ae:9d:a4:f4:ac:40:e7: 68:cf:90:9f:41:5e:08:3d:fe:59:7c:ef:f3:cb:9b: 79:63:fc:e2:53:15:f5:3d:19:8f:5a:06:ee:90:a2: 70:6c:bf:46:af:58:99:d1:42:50:3e:85:00:91:8a: fa:aa:b8:46:27:60:e1:2d:01:e1:48:33:1d:d5:8e: 97:8f:d0:27:b4:e1:01:ca:90:7b:bf:83:59:0e:3f: d5:c9:18:c5:e3:6f:56:18:46:2c:a5:b5:90:21:75: db:91:f3:52:e5:ed:dc:2e:bf:92:f6:87:f4:6c:ad: a0:dd:b4:61:e7:d7:2b:5a:f0:6e:bc:75:06:a7:cc: 29:16:f8:c2:db:a9:df:d8:ac:6f:ea:83:39:46:3d: 50:73:9e:dc:50:e7:f8:57:ca:b5:56:16:f9:ba:3c: 00:22:c6:c0:0f:bc:e7:4c:fa:71:ed:66:7b:a6:e0: a9:ba:b8:59:a1:16:5a:61:33:1d:bd:1e:de:8b:62: 45:b5:9d:76:a1:38:ea:5e:46:42:c3:72:29:8c:c9: b9:df:fb:38:88:45:be:70:3d:cc:86:34:19:28:fa: 15:c6:29:d9:cc:73:45:c3:05:dd:e7:43:76:14:cd: 26:2c:49:24:c4:58:9e:db:9d:48:f8:bf:85:04:b0: 1d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6C:49:DE:24:8C:A0:05:D8:75:BD:07:3D:89:04:9C:6B:62:94:EF X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.52.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:84:f5:e0:f1:11:11:57:37:6e:3d:1d:ef:af:d3:de:3d:87: 02:81:61:c4:c7:29:06:57:8a:9a:cf:ea:30:3a:ec:3d:dc:a8: a2:ab:cf:5b:2c:04:8b:f4:01:27:41:00:d1:e5:4d:d2:d4:20: 8e:b3:21:12:33:1e:7a:98:4e:ba:94:6a:0b:bf:2e:ed:d7:9f: b1:1b:a6:fe:f3:61:e3:2a:b5:88:bb:7f:82:37:c7:aa:42:6c: 36:45:ee:c0:73:42:19:1a:f0:c7:0c:ab:ac:31:ae:a4:16:db: e1:8b:11:a9:ad:a4:24:ba:a2:0d:02:29:ce:ab:2b:fb:d7:ea: 11:f7:ce:1e:e7:75:df:d8:98:6e:44:57:39:66:72:5d:68:45: b0:b8:d7:de:de:de:1e:d9:b7:76:f9:ca:b1:60:f0:70:11:12: 47:8f:7a:d8:d0:56:c9:9e:a7:cc:3d:9e:9f:e4:cb:6d:65:b2: 43:d3:cc:18:88:30:66:10:65:ed:16:54:a3:b7:53:bb:e8:bb: 5a:f7:04:36:e8:c4:51:73:b6:e0:45:a7:83:46:68:6d:71:75: f8:be:ca:65:29:62:cb:ac:35:90:bb:8c:e3:2c:56:93:cc:9f: 72:cf:f5:4a:c9:57:6b:11:70:17:b6:13:5a:51:be:eb:4c:4e: e7:1e:e4:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUwNzA1MDcwODQwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4Y2Y3OC00NTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWAKI1VAw66dpPSsQOdoz5CfQV4IPf5ZfO/zy5t5Y/ziUxX1PRmPWgbukKJw bL9Gr1iZ0UJQPoUAkYr6qrhGJ2DhLQHhSDMd1Y6Xj9AntOEBypB7v4NZDj/VyRjF 429WGEYspbWQIXXbkfNS5e3cLr+S9of0bK2g3bRh59crWvBuvHUGp8wpFvjC26nf 2Kxv6oM5Rj1Qc57cUOf4V8q1Vhb5ujwAIsbAD7znTPpx7WZ7puCpurhZoRZaYTMd vR7ei2JFtZ12oTjqXkZCw3IpjMm53/s4iEW+cD3MhjQZKPoVxinZzHNFwwXd50N2 FM0mLEkkxFie251I+L+FBLAdowIDAQABo4IClTCCApEwHQYDVR0OBBYEFANsSd4k jKAF2HW9Bz2JBJxrYpTvMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvRTBDREEzNzY1 OTZFMTFGMEIxOUFGMjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr/zQwDQYJKoZIhvcNAQELBQADggEBAE+E9eDxERFXN249 He+v0949hwKBYcTHKQZXiprP6jA67D3cqKKrz1ssBIv0ASdBANHlTdLUII6zIRIz HnqYTrqUagu/Lu3Xn7Ebpv7zYeMqtYi7f4I3x6pCbDZF7sBzQhka8McMq6wxrqQW 2+GLEamtpCS6og0CKc6rK/vX6hH3zh7ndd/YmG5EVzlmcl1oRbC4197e3h7Zt3b5 yrFg8HAREkePetjQVsmep8w9np/ky21lskPTzBiIMGYQZe0WVKO3U7vou1r3BDbo xFFztuBFp4NGaG1xdfi+ymUpYsusNZC7jOMsVpPMn3LP9UrJV2sRcBe2E1pRvutM Tuce5Bk= -----END CERTIFICATE-----Generated at Mon Jul 21 19:01:24 2025 by rpki-client